tagged w/ malware
-
Kellogg, Brown & Root (KBR) was responsible for the kickback fraud that occurred in the US v. Khan case, and has been the focus of many other cases of procurement fraud within the LOGCAP project. Since combat operations began in 2001, DCAA has referred to criminal investigators 32 cases of suspected fraud that were associated with all wartime-support contracts. Of those, the vast majority were related to the Logistics Civil Augmentation Program.
http://information-security-resources.com/2009/11/16/revolving-door-of-abuse-procurement-fraud/Kellogg, Brown & Root (KBR) was responsible for the kickback fraud that occurred... more
-
-
Once a predator uses your Internet connection to go to into the bowels of the web, your Internet Protocol address, which is connected to your ISP billing address, is now considered one that is owned by a criminal. If law enforcement happens to be chatting with that person, who’s using your Internet connection to trade lurid porn, then someone may eventually knock on your door at 3 AM with a battering ram. And in freakish and relatively new twist, hackers can use a virus to crack your network and gain remote control access, and then store illicit porn on your hard drive.
http://information-security-resources.com/2009/11/13/what-could-possibly-be-worse-than-a-virus/Once a predator uses your Internet connection to go to into the bowels of the web,... more
-
-
Cenzic released its report revealing the most prominent types of Web application vulnerabilities for the first half of 2009. The report identified over 3,100 total vulnerabilities, which is a 10 percent increase in Web application vulnerabilities compared to the second half of 2008. Among Web browsers, Mozilla Firefox had the largest percentage of Web vulnerabilities, followed by Apple Safari, whose browser showed a vast increase in exploits, due to vulnerabilities reported in the Safari iPhone browser." It seems a bit surprising to me that this study shows that only 15% of vulnerabilities are in IE.
Source: http://www.net-security.org/secworld.php?id=8489Cenzic released its report revealing the most prominent types of Web application... more
-
-
-
Identity theft is preventable. As with any other crime, the risk will always be there. But there are many things people can do to minimize that risk, both online and offline. The National Foundation for Credit Counselors, which sponsors Protect Your Identity Week, has compiled a number of identity theft myths.
http://information-security-resources.com/2009/11/09/ten-common-identity-theft-myths-dispelled/Identity theft is preventable. As with any other crime, the risk will always be there.... more
-
-
-
The Associated Press tells the story of Michael Fiola, a former Massachusetts government employee who was arrested in 2007 after child porn was found on his state-issued laptop computer. He was eventually cleared of all charges after some digging by the defense found that the laptop was infected with malware that was 'programmed to visit as many as 40 child porn sites per minute — an inhuman feat. While Fiola and his wife were out to dinner one night, someone logged on to the computer and porn flowed in for an hour and a half. Prosecutors performed another test and confirmed the defense findings. The charge was dropped — 11 months after it was filed.' The article also discusses the technical aspects of how it could happen and about similar cases in the United Kingdom in 2003.
Source: http://tech.yahoo.com/news/ap/20091108/ap_on_hi_te/us_tec_a_virus_framed_meThe Associated Press tells the story of Michael Fiola, a former Massachusetts... more
-
-
-
;contentBody
A hacker in the Netherlands has invaded iPhones and demanded $7 from his targets for a patch to prevent him from doing it again.;contentBody
A hacker in the Netherlands has invaded iPhones and demanded $7 from... more
-
-
Regardless of what you feel should or should not be private, we all have a right to set expectations that we trust will be met. And as technologists, we have the capability to improve the state of privacy in the face of technological advances that might otherwise undermine it. Privacy is not an Illusion, it is a challenge.
http://information-security-resources.com/2009/11/02/everyday-life-and-the-expectation-of-privacy/Regardless of what you feel should or should not be private, we all have a right to... more
-
-
Forget about vampires, ghouls and zombies. You were much more likely to receive a fright this year from something lurking in your e-mail. There were the usual crop of Trojan horses and phishing expeditions, and as the surprising list points out, some of the scares go all the way up to White House and the FBI.
http://information-security-resources.com/2009/11/01/top-ten-email-related-disasters-of-2009/Forget about vampires, ghouls and zombies. You were much more likely to receive a... more
-
-
-
-
An intruder could eavesdrop on sensitive data sent across the Internet, manipulate the DNS address that redirects traffic from trusted sites to malicious ones, and possibly even infect other routers automatically. Chen says he informed Time Warner’s security department of the hole; they responded that they were aware of the problem but couldn’t do anything about it.An intruder could eavesdrop on sensitive data sent across the Internet, manipulate the... more
-
-
Many internal clouds will run on the back of VMware, but not all, and VMware alone will not satisfy all of the business’s requirements for running an effective internal cloud. Why not? I can think of several reasons…Many internal clouds will run on the back of VMware, but not all, and VMware alone... more
-
-
Most administrators and security officers are well aware of the necessity of system hardening for corporate systems. Hardening is the process of securing a system by reducing its surface of vulnerability. By the nature of operation, the more functions a system performs, the larger the vulnerability surface. Here is a checklist and diagram by which you can perform your hardening activities.Most administrators and security officers are well aware of the necessity of system... more
-
-
It’s a highly competitive market that’s largely dominated by major software companies that have acquired BI vendors and added their capabilities to existing product suites. Here are the top six vendors by revenue and market share. Together they represent more than 80 percent of the current BI market.It’s a highly competitive market that’s largely dominated by major... more
-
-
CIOs will spend more time defining capabilities that can deliver business value (including innovation), and selecting, monitoring and managing multiple vendors. Their performance will not be measured by the size of their IT budget, but the effectiveness of IT in supporting business functions.CIOs will spend more time defining capabilities that can deliver business value... more
-
-
For a long time I have been recapitulating concerns to enterprises about managing the internal threat. And with the recent economic downturn, layoffs and other sources of employee dissatisfaction are increasing the risks from internal threats. The fact is, corporate management must pay attention to the insider threat and implement policies and controls to manage it.For a long time I have been recapitulating concerns to enterprises about managing the... more
-
-
I’m not arguing for an eggshell model of security - crunchy on the outside, squishy on the inside - but it makes things much easier to be able to address an application server’s security requirements without the need to assume that whatever security you implement on an application level is all you will have.I’m not arguing for an eggshell model of security - crunchy on the outside,... more
-
